Subject: [alpine-aports] [PATCH v3.2] main/bind: security upgrade to 9.10.4_p5 - fixes #6679

From: Sergei Lukin <[email-masked]>
Date: Fri, 13 Jan 2017 08:03:23 +0000

CVE-2016-9131: A malformed response to an ANY query can cause an assertion failure during recursion
CVE-2016-9147: An error handling a query response containing inconsistent DNSSEC information could cause an assertion failure
CVE-2016-9444: An unusually-formed DS record response could cause an assertion failure
---
 main/bind/APKBUILD | 12 +++++++++---
 1 file changed, 9 insertions(+), 3 deletions(-)

diff --git a/main/bind/APKBUILD b/main/bind/APKBUILD
index c191b88..80cb935 100644
--- a/main/bind/APKBUILD
+++ b/main/bind/APKBUILD
@@ -1,8 +1,8 @@
+# Contributor: Sergei Lukin <[email-masked]>
 # Maintainer: Natanael Copa <[email-masked]>
 # Contributor: Carlo Landmeter <[email-masked]>
-# Contributor: Sergey Lukin <[email-masked]>
 pkgname=bind
-pkgver=9.10.4_p3
+pkgver=9.10.4_p5
 _ver=${pkgver%_p*}
 _p=${pkgver#*_p}
 [ "$_p" != "$pkgver" ] && _ver="${_ver}-P$_p"
@@ -31,7 +31,13 @@ source="http://ftp.isc.org/isc/bind9/${_ver}/bind-${_ver}.tar.gz
 
 # secfixes:
 #   9.10.4_p3:
-#   - CVE-2016-2776
+#     - CVE-2016-2776
+#   9.10.4_p4-r0:
+#     - CVE-2016-8864
+#   9.10.4_p5-r0:
+#     - CVE-2016-9131
+#     - CVE-2016-9147
+#     - CVE-2016-9444
 
 builddir="$srcdir/bind-${_ver}"
 prepare() {
-- 
2.4.11

---
Unsubscribe:  [email-masked]
Help:         [email-masked]
---